Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/i7ID9ZFWYHjo_8ixD0Iaykj4z_I.roa
File: i7ID9ZFWYHjo_8ixD0Iaykj4z_I.roa (raw, json)
Hash identifier: tE7IJ6Q/iPEkfaa/ESoA2f+O6sc9JGsqgrTt60trPdw=
Subject key identifier: 8B:B2:03:F5:91:56:60:78:E8:FF:C8:B1:0F:42:1A:CA:48:F8:CF:F2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029D8BCE355E980CD7FF4266AA3048
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/i7ID9ZFWYHjo_8ixD0Iaykj4z_I.roa
Signing time: Mon 02 Jan 2023 01:04:57 +0000
ROA not before: Mon 02 Jan 2023 01:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211859
IP address blocks: 78.135.104.0/24 maxlen: 24
78.135.106.0/24 maxlen: 24
78.135.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 21:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:9d:8b:ce:35:5e:98:0c:d7:ff:42:66:aa:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bb203f591566078e8ffc8b10f421aca48f8cff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:f3:ab:0d:6f:01:ae:07:e9:1a:f9:31:bd:
0a:28:29:f4:f6:ee:17:a6:41:0c:8a:a5:92:8a:55:
62:c1:73:1c:da:3a:b3:7e:68:a3:3a:ed:23:3f:9f:
c9:52:37:f6:2a:47:90:e0:e7:cb:47:c9:98:ec:08:
cc:87:3c:22:d5:74:37:8e:cf:7a:ad:b6:7b:17:d0:
10:d3:fa:55:32:f5:74:d3:d2:e5:c4:76:27:d1:32:
4f:89:92:8f:ba:bb:ac:6f:ff:0c:b9:88:2a:1e:4a:
9b:ec:2d:64:4a:a4:99:39:f8:9b:3c:fb:7d:8d:c3:
cb:2f:17:55:14:c4:63:96:ea:c0:5f:9c:d5:99:a2:
a8:35:8e:1f:dc:3d:a8:b9:35:06:50:07:41:72:a0:
7e:3e:29:cd:95:83:90:5d:57:44:eb:36:df:d7:5d:
44:97:53:9e:a6:9b:80:29:a9:1e:6c:2b:62:71:d9:
f9:f5:d1:bf:a7:ca:7a:15:a5:51:4d:b7:d5:be:78:
48:d1:91:ff:c0:d3:99:13:e9:fd:cb:64:4a:f9:0d:
e3:d7:79:bf:ef:ec:4d:c8:03:bc:71:2a:8e:ea:00:
c3:6c:64:3e:07:32:c9:57:87:13:c3:8e:6e:4b:85:
ca:17:4e:7a:3b:ee:b5:52:fa:8e:6e:fd:42:ae:7a:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:03:F5:91:56:60:78:E8:FF:C8:B1:0F:42:1A:CA:48:F8:CF:F2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/i7ID9ZFWYHjo_8ixD0Iaykj4z_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.104.0/24
78.135.106.0/23
Signature Algorithm: sha256WithRSAEncryption
62:49:40:5f:fe:92:e3:f3:15:31:93:0c:3c:c8:85:14:4e:50:
a5:1d:81:1f:5e:2c:3a:4d:cd:23:8b:e0:f8:bd:95:98:54:d1:
13:dc:47:ac:b0:48:ba:c6:4d:6c:be:00:cc:ff:76:ef:d2:03:
68:6e:b2:ad:36:60:73:1c:40:d4:66:78:3d:30:db:ae:82:c7:
6d:1f:81:60:fc:b0:83:b8:a8:ea:20:13:0b:66:ec:e3:73:bc:
0c:7f:45:44:d3:c5:64:2f:29:8a:44:cd:b5:f5:e6:20:ac:34:
ca:a2:5e:70:87:7e:10:ff:86:4c:4e:4b:73:39:ce:ae:43:af:
b0:fa:46:34:33:16:50:4f:bd:b4:2e:23:68:a5:b8:8e:ca:56:
27:4d:2d:ce:38:3f:62:95:fd:31:93:8a:88:d7:93:fd:5c:80:
a9:49:e1:a0:37:a0:cc:f8:b8:13:e8:b3:7c:7c:9e:55:49:12:
f6:9a:1a:9a:79:03:62:50:78:77:4a:54:cd:87:ae:ca:0d:56:
8e:8f:5b:e5:97:4c:f5:26:70:a3:bd:f6:8d:d2:da:58:0a:ca:
13:da:2d:01:1a:a9:b4:c9:31:06:be:cb:a5:65:14:97:70:df:
f5:3e:2b:47:84:41:5b:b6:31:e5:f7:21:e1:3d:95:f5:e4:e2:
91:52:70:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwAp2LzjVemAzX/0JmqjBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTAyMDEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmIyMDNmNTkxNTY2MDc4ZThmZmM4YjEwZjQyMWFjYTQ4ZjhjZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Tzqw1vAa4H6Rr5Mb0KKCn09u4X
pkEMiqWSilViwXMc2jqzfmijOu0jP5/JUjf2KkeQ4OfLR8mY7AjMhzwi1XQ3js96
rbZ7F9AQ0/pVMvV009LlxHYn0TJPiZKPurusb/8MuYgqHkqb7C1kSqSZOfibPPt9
jcPLLxdVFMRjlurAX5zVmaKoNY4f3D2ouTUGUAdBcqB+PinNlYOQXVdE6zbf111E
l1OeppuAKakebCticdn59dG/p8p6FaVRTbfVvnhI0ZH/wNOZE+n9y2RK+Q3j13m/
7+xNyAO8cSqO6gDDbGQ+BzLJV4cTw45uS4XKF056O+61UvqObv1CrnrOmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIuyA/WRVmB46P/IsQ9CGspI+M/yMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvaTdJRDlaRldZSGpvXzhpeEQwSWF5a2o0el9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodoAwQB
TodqMA0GCSqGSIb3DQEBCwUAA4IBAQBiSUBf/pLj8xUxkww8yIUUTlClHYEfXiw6
Tc0ji+D4vZWYVNET3EessEi6xk1svgDM/3bv0gNobrKtNmBzHEDUZng9MNuugsdt
H4Fg/LCDuKjqIBMLZuzjc7wMf0VE08VkLymKRM219eYgrDTKol5wh34Q/4ZMTktz
Oc6uQ6+w+kY0MxZQT720LiNopbiOylYnTS3OOD9ilf0xk4qI15P9XICpSeGgN6DM
+LgT6LN8fJ5VSRL2mhqaeQNiUHh3SlTNh67KDVaOj1vll0z1JnCjvfaN0tpYCsoT
2i0BGqm0yTEGvsulZRSXcN/1PitHhEFbtjHl9yHhPZX15OKRUnDZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org